S1lv3r PHP 7.3.15-3 - 'PHP_SESSION_UPLOAD_PROGRESS' Session Data Injection
webapps php

stresser NoteBurner 2.35 - Denial Of Service (DoS) (PoC)
webapps windows

stresser Leawo Prof. Media 11.0.0.1 - Denial of Service (DoS) (PoC)
dos windows

Joan Martinez Elasticsearch ECE 7.13.3 - Anonymous Database Dump
webapps multiple CVE-2021-22146

Podalirius Microsoft SharePoint Server 2019 - Remote Code Execution (2)
webapps aspx CVE-2020-1147

Vikas Srivastava WordPress Plugin Simple Post 1.1 - 'Text field' Stored Cross-Site Scripting (XSS)
webapps php

r0ny ElasticSearch 7.13.3 - Memory disclosure
webapps multiple CVE-2021-22145

LiquidWorm KevinLAB BEMS 1.0 - File Path Traversal Information Disclosure (Authenticated)
webapps hardware

LiquidWorm KevinLAB BEMS 1.0 - Authentication Bypass
webapps hardware

LiquidWorm KevinLAB BEMS 1.0 - Undocumented Backdoor Account
remote hardware

Aakash Choudhary WordPress Plugin KN Fix Your Title 1.0.1 - 'Separator' Stored Cross-Site Scripting (XSS)
webapps php

Vikas Srivastava WordPress Plugin Mimetic Books 0.2.13 - 'Default Publisher ID field' Stored Cross-Site Scripting (XSS)
webapps php

nhattruong WordPress Plugin LearnPress 3.2.6.8 - Privilege Escalation
webapps php

nhattruong WordPress Plugin LearnPress 3.2.6.7 - 'current_items' SQL Injection (Authenticated)
webapps php CVE-2020-6010

Gr33nh4t Aruba Instant 8.7.1.0 - Arbitrary File Modification
remote hardware CVE-2021-25155

Metin Yunus Kandemir Seagate BlackArmor NAS sg2000-2000.1331 - Command Injection
webapps hardware